kdc ldap plugin code

[Greg Hudson]

On 09/11/2012 11:11 AM, Jim Shi wrote:
> Greg,
>  I  think these characters are not allowed  in DN (hence need escaped) in openldap.

I see.  I think ldap_filter_correct() was originally designed to be used
only for filter strings, but it is already used in one place for DN
strings (and would be used that way in a second place after your patch),
so we can just add a comment that it works for both.  It's not harmful
to quote characters that don't need to be quoted, and filter strings and
DN strings both accept %XX quoting.